The Curious Engineer

All blogs / Security

Leviathan Security Group

leviathansecurity.com/blog

Authoritative insights on cybersecurity, hacking, penetration testing, DFIR, and other interesting infosec topics from the team at Leviathan Security Group.

SecurityNetworking

’15’20’25
Posts
75 from 1 May 2012 to 13 Oct 2026
Posting
now and then (4 in the last year)
Kind
company blog
Feed
https://www.leviathansecurity.com/blog?format=rss

2026 3

  1. October 2026 Mobile Platform Security & Fraud Prevention Assessment
  2. “UEFI is the New BIOS”: Lab Setup
  3. The Power of Good Privacy Practices

2025 8

  1. Overcoming Insularity, Part 2: Moving Beyond the “Try Harder” Mentality
  2. October 2025 Mobile Platform Security & Fraud Prevention Assessment
  3. Overcoming Insularity: A Critique of the “Try Harder” Mentality
  4. Integrating Security Metrics into Quality Models: A DORA-Aligned Strategy
  5. AWS Cognito Security — Cognito User Pool Introduction and User Attributes
  6. AWS Cognito Security — Overview
  7. AWS Cognito User Pool — Shared User Pools
  8. 2025 Mobile Platform Fraud Prevention Assessment

2024 13

  1. 3 Pillars of Security at Day 1 Start Ups - Risk
  2. UEFI is the new BIOS
  3. The Unexpected Benefits of Threat Modeling
  4. Bypassing SSRF Filters Using r3dir
  5. CVE-2024-31735: LibEvent Library Memory Leak
  6. Vulnerability Research and the Importance of Supporting Young Talent
  7. TunnelVision (CVE-2024-3661): How Attackers Can Decloak Routing-Based VPNs For a Total VPN Leak
  8. Encoding Bitwise Functions as Polynomials
  9. When You Have No Bars
  10. Attacking Meteor Applications with eighthundredfeet — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  11. A Penetration Tester's Guide to Meteor — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  12. WebSockets for Penetration Testers — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  13. The Balancing Act: Online Security vs. Privacy — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2023 4

  1. AI Augments Hackers, But Won’t Replace Them — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. 2023 Competitive Security Feature Review: Mobile Platform Scam and Phishing Prevention — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Our Most Common Pen Test Finding? Vulnerabilities in Third-Party Components — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Building a Pwnagotchi with the Waveshare 2.13in display version 3 — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2022 3

  1. Attacking Go's Lagged Fibonacci Generator — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. MASA Program Introduction — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Mobile Platform Scam and Phishing Prevention - Competitive Security Feature Review — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2021 4

  1. Would You Like To Play A Game? Increasing Security and Compliance Through Gamification of Tabletop Exercises — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Kubernetes and Container Security — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Leviathan Security Group Offers Pre-Draft Comments on NIST SP 800-66, Implementing the HIPAA Security Rule — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Common Security Certifications & Audits: A Review of Some Standard Security Certifications for SaaS Vendors — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2020 5

  1. Initial Steps Towards A Risk Management Plan: Creating A Basic Risk Register — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Contingency Planning and Business Continuity — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Cybersecurity Recommendations in a Rapidly Emerging Telework Environment — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Mining Technical Debt for Fun and Profit — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  5. Initial Release of the DOD Cybersecurity Maturity Model Certification — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2019 2

  1. Getting Started With the Upcoming DOD Cybersecurity Maturity Model Certification — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Client-Side Authorization — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2018 3

  1. Dark Matter and Measuring Security — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. ASLR Protection for Statically Linked Executables — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. The Calculus of Threat Modeling — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2017 6

  1. A Minimum Viable Risk Management Program — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Temporary Workarounds Shouldn’t Last Longer Than Permanent Solutions — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. WannaCry as the Regulatory Brown M&M — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Roll for Initiative — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  5. Compliance as a Cost of Customer Acquisition — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  6. On Changing Password Guidance: A Good First Step From Microsoft — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2016 8

  1. U.S. Regulatory Outlook for 2017 — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Reverse Engineering Firefox and Tor Targeted Payloads — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Making Your Security Story Work For You: How to Not Trigger Sales Objections — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Securing Systems You're Planning on Replacing — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  5. Small Startups, Pursuing Big Customers — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  6. iPhone Spyware Trident Exploit Chain — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  7. LastPass and How To Respond To Zero Day Vulnerabilities — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  8. Bulk ASLR Data Analysis — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2015 8

  1. The Cobbler’s Children and Source Code Integrity, or Why Your Source Code Repositories Need Better Shoes. — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Guidance - Openssl Vulnerability CVE-2015-1793 — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Guidance - Flash Vulnerability CVE-2015-5119 — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Quantifying the Cost of Forced Localization — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  5. Strengthening the Nation’s Defense — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  6. Unpopular Opinion - CSI: Cyber Could Be Good for Information Security — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  7. The Harms of Forced Data Localization — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  8. Scarcity of Cybersecurity Expertise — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2014 4

  1. The Next Level — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. The Case of The Modified Binaries — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Spideroak's Crypton: Design and Implementation Evaluation — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  4. Leviathan’s (Mandatory) Heartbleed Blog Entry — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2013 3

  1. Use of Windows Exception Handling Metadata — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  2. Introducing Ftrace — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory
  3. Who Needs Cracking? Give Me The Plaintext! — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

2012 1

  1. THE DOUBLE-EDGED SWORD OF HSTS PERSISTENCE AND PRIVACY — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory